mag/PHPGuard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updates to scanner

Browse Source
This commit is contained in:
Mark Gregory
2026-10-22 12:55:49 +01:00
parent 8a8061b1e8
commit 0c4a1625b0
6 changed files with 101 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
RELEASE_NOTES.md
+9 -8
View File
@@ -1,10 +1,11 @@
# PHPGuard 1.4.0 (Build 5)
# PHPGuard 1.5.0 — Scan accuracy and report import
- Added a native macOS application icon and branded installer graphic asset.
- Added read-only security investigation: recently modified PHP files and selected Nginx error signals.
- Added investigation coverage reporting and non-conclusive findings.
- Preserved existing server inventory, Docker inspection, CVE research and scan history.
- Security signals are not proof of compromise; vendor CVE fix matching remains pending.
- Docker detection now distinguishes a PHP runtime from a container without a PHP CLI. Missing PHP is no longer reported as a PHP finding.
- Docker daemon access failures are reported as incomplete coverage.
- Container image identifiers and PHP versions are collected for identified PHP runtimes.
- Older scan history is normalized to suppress erroneous Docker findings while preserving the raw scan output.
- Import existing JSON scan reports, including Pegasus scans, with duplicate detection.
- Package installed/candidate revision differences are surfaced for review; no CVE exposure is inferred without vendor evidence.
- Read-only SSH collection; no remote changes or updates.
Build: `./Scripts/build.sh`
Release: `NOTARY_PROFILE=orion-notary ./Scripts/release.sh`
Known limitation: CVE-to-Ubuntu-USN package revision verification is not yet implemented. NVD keyword results remain research only. macOS build and notarization must be run on a Mac.